Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/10F1A0582B8511EEA7FF697BC4F9AE02.roa
File:                     10F1A0582B8511EEA7FF697BC4F9AE02.roa (raw, json)
Hash identifier:          moXXvJLFKkIqyJw20Q1OuyiRN76hq8AL96LMv4bv4WY=
Subject key identifier:   E6:30:A0:0E:C2:2C:78:0A:BD:23:40:7B:FD:D4:74:64:DB:03:B7:1E
Certificate issuer:       /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial:       01F0
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/10F1A0582B8511EEA7FF697BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:35:26 +0000
ROA not before:           Wed 07 May 2025 03:41:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134829
IP address blocks:        103.186.86.0/24 maxlen: 24
                          103.186.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
                          rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
        Validity
            Not Before: May  7 03:41:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ec3e-f9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:73:7e:0a:c7:3a:b9:11:09:a3:8d:be:c2:
                    c7:1d:b5:ae:cd:dc:49:9e:3f:f1:5f:09:e7:30:64:
                    60:d0:04:50:fc:ce:87:c6:66:71:0e:51:ce:6a:21:
                    f6:4d:90:bc:6b:6a:a5:3f:5b:8a:3e:2d:ef:88:55:
                    7a:f0:66:fd:7c:52:b9:db:2c:27:ed:30:42:8f:d2:
                    72:c8:ae:69:13:af:ff:7d:94:4a:50:39:12:d0:72:
                    70:aa:d7:2a:e7:1f:1b:63:9d:2f:ac:4c:c7:3c:b7:
                    3b:bc:5d:48:ac:1c:0f:a0:ce:c9:8e:44:fa:36:a2:
                    f1:b8:d9:f4:d2:1a:02:a6:ae:e2:34:63:24:03:80:
                    83:9f:1c:fa:02:fc:14:ce:31:ef:8e:3a:a5:6a:40:
                    dc:f3:db:27:96:50:2d:e2:1b:d6:de:06:ae:d4:ab:
                    1b:10:e4:f4:26:a3:c9:de:d6:9e:82:3b:82:70:ff:
                    a6:59:d9:65:0d:b0:52:a0:0f:5c:8d:16:f7:13:de:
                    16:c9:04:25:cd:b0:5e:28:7a:be:dd:ca:15:c5:51:
                    9f:b3:47:a1:ad:9f:d6:f4:db:69:a4:18:c2:78:68:
                    ef:a0:04:7b:19:57:de:7e:ca:ed:fb:6a:5e:72:0f:
                    5f:d4:c3:1f:0c:da:0c:71:f0:be:d2:a9:83:c0:40:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:30:A0:0E:C2:2C:78:0A:BD:23:40:7B:FD:D4:74:64:DB:03:B7:1E
            X509v3 Authority Key Identifier:
                keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/10F1A0582B8511EEA7FF697BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:f9:8f:b1:b1:3d:76:b2:e1:6e:9b:6e:5f:1a:13:16:0b:c8:
         a2:2b:38:c5:20:38:19:8b:a1:c6:36:3e:f7:73:7f:42:2e:f9:
         2c:5f:fe:92:28:bc:e9:08:1c:27:75:54:40:8c:d8:19:e9:67:
         be:38:d4:a1:2f:fb:1c:70:2f:5e:fd:4e:cb:01:e2:ff:5a:09:
         bf:a8:71:6c:3e:0d:6b:f6:09:17:6e:d0:de:97:b5:89:ca:b9:
         39:9e:0f:a1:2f:29:99:07:b2:f2:74:66:0b:28:75:f4:fb:a5:
         b6:24:76:ea:ff:2c:de:45:be:5a:7b:36:e3:75:8d:03:00:08:
         1f:d8:4a:b8:bb:41:8e:34:42:95:b6:b5:63:5d:fe:23:2e:2b:
         eb:3d:a5:ab:37:63:0b:1b:61:af:94:5d:28:10:3c:99:e0:c4:
         cc:9c:96:c4:7c:1e:8b:43:b2:e3:ed:49:6e:4e:8a:8a:b6:97:
         6f:00:5b:91:af:25:bb:55:f1:db:e4:91:e6:5a:74:f7:8f:ad:
         ba:96:ee:61:05:66:53:27:82:a2:72:e8:6f:f4:91:9c:6c:23:
         33:50:67:18:01:dd:cf:55:93:c3:06:fa:d3:e6:8f:2d:f8:dd:
         a5:fa:39:e3:78:8d:6b:e3:be:32:d0:1d:52:52:50:f6:3f:ef:
         e1:d6:cd:ad
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF
QTZDMjJCOTgwHhcNMjUwNTA3MDM0MTExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWMzZS1mOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8RzfgrHOrkRCaONvsLHHbWuzdxJnj/xXwnnMGRg0ARQ/M6HxmZxDlHOaiH2
TZC8a2qlP1uKPi3viFV68Gb9fFK52ywn7TBCj9JyyK5pE6//fZRKUDkS0HJwqtcq
5x8bY50vrEzHPLc7vF1IrBwPoM7JjkT6NqLxuNn00hoCpq7iNGMkA4CDnxz6AvwU
zjHvjjqlakDc89snllAt4hvW3gau1KsbEOT0JqPJ3taegjuCcP+mWdllDbBSoA9c
jRb3E94WyQQlzbBeKHq+3coVxVGfs0ehrZ/W9NtppBjCeGjvoAR7GVfefsrt+2pe
cg9f1MMfDNoMcfC+0qmDwECebwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOYwoA7C
LHgKvSNAe/3UdGTbA7ceMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB
Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlCNjEvNzYxNkQ0RkMyQUNEMTFFRUI3MjIyQzNDQzRGOUFFMDIvMTBGMUEwNTgy
Qjg1MTFFRUE3RkY2OTdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7pWMA0GCSqGSIb3DQEBCwUAA4IBAQCo+Y+xsT12suFum25fGhMW
C8iiKzjFIDgZi6HGNj73c39CLvksX/6SKLzpCBwndVRAjNgZ6We+ONShL/sccC9e
/U7LAeL/Wgm/qHFsPg1r9gkXbtDel7WJyrk5ng+hLymZB7LydGYLKHX0+6W2JHbq
/yzeRb5aezbjdY0DAAgf2Eq4u0GONEKVtrVjXf4jLivrPaWrN2MLG2GvlF0oEDyZ
4MTMnJbEfB6LQ7Lj7UluToqKtpdvAFuRryW7VfHb5JHmWnT3j626lu5hBWZTJ4Ki
cuhv9JGcbCMzUGcYAd3PVZPDBvrT5o8t+N2l+jnjeI1r474y0B1SUlD2P+/h1s2t
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:15 2026 by rpki-client